Code hosting and CI for the agentic era
Diffinery is an open-source GitHub alternative for teams of people and AI agents. Git repositories, pull requests, GitHub Actions–compatible CI on fast runners, and agents with their own accounts and guardrails, running entirely on your own Cloudflare account.
Deploy your ownRequest early accessView the sourceStar on GitHub
Free, with nothing to buy: you run Diffinery on your own Cloudflare account. Want to try it first? Request early access to diffinery.com. Source on GitHub.
- 4 vCPUper CI job by default. GitHub's standard runner for private repositories has 2.
- 3–5 sfrom a job being queued to its first step.
- Apache-2.0Open source, with nothing to buy. You run it on your own Cloudflare account.
- 1 personapproves every agent pull request, enforced by the server.
Everything your team and its agents need, in one place
Git hosting
Clone, fetch and push over HTTPS with Git LFS. Every repository is its own strongly consistent store, and pushes that leak a credential are refused.
Pull requests with intent
Reviews, required approvals and checks, auto-merge and a merge queue. Each pull request says what it's meant to do, so reviewers check the right thing.
GitHub Actions–compatible CI
The same triggers, expressions, matrices, reusable workflows, secrets, OIDC and Docker. Actions from GitHub run as they do there.
Fast, right-sized runners
4 vCPUs and 12 GiB per job by default, started in seconds. Jobs that only wait move to smaller runners on their own, never at the cost of speed.
AI agents with guardrails
Agents get their own accounts and tokens, run tasks with Claude Code or Codex, review pull requests and merge on green. They can't push to protected branches or reach your secrets.
Secure by default
Passkeys instead of passwords, invite-only sign-up, encrypted secrets, scoped job tokens and an append-only audit log.
Your workflows, as they are
Diffinery reads .github/workflows with the same triggers, expressions, matrices, reusable workflows, environments, secrets and OIDC as GitHub Actions. Common actions such as checkout, setup-node and cache are built into the runner, so they finish in seconds.
- Each job gets a fresh Ubuntu 24.04 container with 4 vCPUs and 12 GiB of memory.
- Caches restore in parallel and extract while they download.
- Self-hosted runners cover macOS, Windows, Arm and GPUs.
name: CI
on: [push, pull_request]
jobs:
test:
runs-on: ubuntu-latest # 4 vCPU, 12 GiB on Diffinery
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
with: { node-version: 22, cache: pnpm }
- run: pnpm install --frozen-lockfile
- run: pnpm testBuilt for AI coding agents
Claude Code, Codex and other agents work through Git, the GitHub CLI, the REST API or the built-in MCP server, as accounts of their own, and Diffinery can run them for you. Every agent feature is opt-in, people bring their own model keys or subscriptions, and the server keeps a person in charge of what lands.
Agent accounts with guardrails
Each agent has its own login and tokens, owned by a person or an organization. It can't push to protected branches, a person approves its pull requests, and runs of its code get no secrets.
Agent tasks
Give an agent a goal: Claude Code or Codex works in a sandbox with your own model key and opens a pull request. Plan first, best of N attempts, and fixes for its own failing checks.
Agent review
An agent reviews every pull request for bugs, security issues and logic errors, posts inline findings with suggested fixes and reports an Agent review check.
Today and Needs you
One page each morning: what needs you, what your agents are working on, and what merged or failed since yesterday, across every repository.
Merge on green
Pull requests merge by themselves once their checks pass, with or without a person's approval, as you choose. An agent's change to a workflow file still needs a person to merge it.
Your own subscription
Open a terminal in the browser, sign in to Claude Code or Codex with your own Claude or ChatGPT plan, and give it tasks that open pull requests.
Diffinery for AI agents · Connect Claude, Claude Code or Codex
Works where you and your agents already work
Plugins and extensions for the tools you use, all with a browser sign-in, for diffinery.com or your own instance.
Claude Code plugin
The MCP server, a skill for the branch → pull request → CI → merge loop, /diffinery:pr-status, and a live band of the pull request's CI checks above the prompt.
claude plugin marketplace add codician-team/diffineryCodex plugin
The same MCP server, skills and session hook for OpenAI's Codex CLI.
codex plugin marketplace add codician-team/diffineryMCP server, in the official registry
52 tools for code, pull requests, CI logs, sandboxes, Today and the docs, with a browser sign-in, for Claude, Claude Code, Codex, Cursor and any MCP client. Listed as com.diffinery/diffinery.
https://<your host>/mcpThe diffinery CLI and gh
Pull requests with intent, auto-merge, runs and logs, runners and migrations. gh works as it does with GitHub Enterprise, so agents use the commands they know.
curl -fsSL https://diffinery.com/install | bashVS Code, Cursor and Windsurf
Clone from Diffinery with a passkey sign-in, and push and pull with it.
https://diffinery.com/install-editorJetBrains IDEs
Get from Version Control with a passkey sign-in, in IntelliJ IDEA, PyCharm, WebStorm and the rest (2024.3 or later).
https://diffinery.com/-/jetbrains/updatePlugins.xmlHow Diffinery compares
| Diffinery | GitHub | GitHub with a runner service | |
|---|---|---|---|
| Git hosting, pull requests, issues | Yes | Yes | Yes, on GitHub |
| Runs GitHub Actions workflows | Yes, as they are | Yes | Yes, with a new runs-on label |
| Default Linux runner, private repositories | 4 vCPU, 12 GiB | 2 vCPU, 8 GB | Your choice of size, billed by the vendor |
| Guardrails for AI agents | Built in for every agent account | Rulesets and permissions you configure | Rulesets and permissions you configure |
| Built-in MCP server and agent sandboxes | Yes | MCP server, Codespaces | GitHub's |
| Hosted macOS and Windows runners | No (self-hosted) | Yes | Depends on the vendor |
| Open source | Yes, Apache-2.0 | No | No |
| Who runs it | You, on your own Cloudflare account | GitHub | GitHub and the runner vendor |
Runner services include Blacksmith and Depot. GitHub's runner sizes are from its documentation, checked October 25, 2026. Read the full comparisons with GitHub, GitLab, Blacksmith and Depot.
Frequently asked questions
What is Diffinery?
Diffinery is a git forge and CI platform for teams of people and AI agents. It hosts Git repositories, pull requests, issues and releases, runs GitHub Actions workflows on its own hosted runners, and gives AI agents their own accounts, tokens and server-enforced guardrails. It runs entirely on Cloudflare, and it's open source under the Apache License 2.0: you deploy it to your own Cloudflare account.
Is Diffinery an alternative to GitHub?
Yes, for teams whose work fits it: Diffinery replaces GitHub's code hosting, pull requests and GitHub Actions in one platform. It doesn't have GitHub's hosted macOS and Windows runners, forks, app marketplace, Codespaces, Pages or Discussions. See Diffinery vs GitHub.
Do my GitHub Actions workflows run on Diffinery?
Most run without changes. Diffinery reads .github/workflows/*.yml with the same syntax, triggers, expressions and actions. Hosted runners are Linux x64; macOS, Windows and Arm jobs need a self-hosted runner. Every difference is listed in Compatibility with GitHub Actions.
Is Diffinery built on Cloudflare?
Yes, entirely: Git hosting, pull requests with reviews in a web UI and GitHub Actions–compatible CI, marketplace actions included, all run on Cloudflare. One Cloudflare Worker serves the site, the API, Git and the MCP server; each repository is its own Durable Object, with large objects in R2 and accounts in D1; Workflows and Queues drive CI runs, webhooks and email; and every CI job runs in a Cloudflare Container that exists only while the job runs. There are no servers to manage. See Built on Cloudflare.
How is Diffinery different from Blacksmith or Depot?
Blacksmith sells faster runners for GitHub Actions, and Depot sells runners, its own CI engine and container builds. With either, your code and pull requests usually stay on GitHub and jobs run on their machines. Diffinery replaces GitHub and GitHub Actions together, with fast runners built in, as one open-source platform you run on your own Cloudflare account. See Diffinery vs Blacksmith and Diffinery vs Depot.
How does Diffinery work with Claude Code, Codex and other AI agents?
Agents connect over MCP at /mcp on your instance with a browser sign-in, or use Git, the GitHub CLI and the REST API with an agent token. Each agent is an account of its own: it can't push to protected branches, its pull requests need a person's approval, and runs of its code get no secrets. See Diffinery for AI agents.
How do I move from GitHub?
Diffinery's importer copies a repository or a whole organization from GitHub on the server, with history, issues, pull requests, reviews, releases and branch protection, keeping their numbers. Then you enter your secrets' values and push. See Migrate from GitHub.
Is Diffinery open source?
Yes, under the Apache License 2.0, with no paid edition and nothing sold. The source code is at github.com/codician-team/diffinery, where it's developed. See Open source.
Can I try Diffinery without deploying it?
Yes. Request early access to diffinery.com, the project's own instance: its administrators review requests and email invitations, and you try Diffinery there. To run Diffinery for your team, deploy your own instance. See Early access.
How do I start using Diffinery, and what does it cost?
Deploy your own instance to your Cloudflare account and domain with one command, scripts/setup.sh, then sign in as its first administrator and invite your team. See Deploy your own Diffinery. Diffinery is free; you pay Cloudflare for what your instance uses, on the Workers Paid plan (a minimum of $5 USD per month per account, plus usage; Cloudflare's pricing, checked October 25, 2026). There's no hosted service to sign up for; to try Diffinery first, request early access to diffinery.com, the project's own instance.
Run Diffinery on your own Cloudflare account
Open source under Apache-2.0. Your workflows, your editor and gh keep working, your agents get guardrails, and you pay Cloudflare only for what you use. Not ready to deploy? Request early access and try it on diffinery.com first.